Synchronise All Active Directory Groups on a Schedule
After you import Active Directory groups in Tableau Server, you can make sure they stay synchronised in Tableau Server by setting up a schedule. You can also synchronise all Active Directory groups on the server on-demand, at any time. The minimum site role setting for the group is applied when users are synchronised.
Note: In the context of user and group synchronisation, Tableau Server configured with LDAP identity store is equivalent to Active Directory. Active Directory synchronisation features in Tableau Server function seamlessly with properly configured LDAP directory solutions.
Beginning in versions 2021.1.23, 2021.2.21, 2021.3.20, 2021.4.15, 2022.1.11, 2022.3.3 and 2023.1, you can set a maximum time limit for how long a scheduled group synchronisation can take before it gets cancelled. The default time limit is 4 hours. For more information, see backgrounder.timeout.sync_ad_group.
1 Set a minimum site role for synchronisation
In a site, click Groups. Select a group, and then click Actions> Minimum Site Role. Select the minimum site role, and then click Change Site Role. Server and site administrators can set the minimum site role for group users to be applied during Active Directory synchronisation. If you don't set a minimum site role, new users are added as Unlicensed.
Synchronising can promote a user's site role, but will never demote a user's site role.
2 Set the schedule
Server administrators can enable synchronisation for all Active Directory groups on the General tab of the Settings page for the server. Enable synchronisation, select the frequency settings, and then click Save.
All Active Directory groups on the server are synchronised according to the same schedule.
3 Run synchronisation on-demand (optional)
On the General tab of the Settings page, click Synchronise All Groups to synchronise all Active Directory groups on Tableau Server immediately. Click this button at any time to ensure new users and changes are reflected in all Active Directory groups on the server.
Click Synchronise All Groups to synchronise all Active Directory groups on the server outside of a schedule.
4 View the status of synchronisation tasks
Server and site administrators can view the results of Active Directory synchronisation jobs in the Background Tasks for Non Extracts administrative view. On the server or in a site, click Status. Under Analysis, click Background Tasks for Non Extracts and filter on the Queue Active Directory Groups Sync and Sync Active Directory Group tasks.
Queue Active Directory Groups Sync queues the Sync Active Directory Group tasks to be run.